Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db5de5bf-c386-47fc-819b-84f11b94fb74.roa
File: db5de5bf-c386-47fc-819b-84f11b94fb74.roa (raw, json)
Hash identifier: xqaZ6zTleTRkxxkgBUkSjFPmKmjdrSKImzEuQlj7dJs=
Subject key identifier: 02:2D:32:E7:2E:61:E0:88:15:C0:CD:5B:DF:67:98:FF:73:7F:A4:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19E1C0DA2BCB5793E5F38758FABBFA8FED0738BA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db5de5bf-c386-47fc-819b-84f11b94fb74.roa
Signing time: Wed 19 Aug 2026 00:50:10 +0000
ROA not before: Wed 19 Aug 2026 00:50:10 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e1:c0:da:2b:cb:57:93:e5:f3:87:58:fa:bb:fa:8f:ed:07:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:10 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=5cf390f1551d6be29eca86ae5b6685801e7f3cd182922a63d6d8f5e04e71fc57, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:08:34:6e:4e:8f:51:2f:95:10:42:ff:ad:
ab:a2:24:0c:96:d7:ce:45:15:1d:29:ba:3b:07:b0:
a2:ba:31:98:fd:7f:7d:52:5f:0c:25:b3:f0:88:57:
66:cd:d7:d2:35:0f:f8:b9:54:54:26:d6:26:f9:ca:
5d:40:42:9a:39:a8:75:fc:0d:fa:95:ac:a5:01:71:
64:a1:4d:2b:32:b0:7c:39:5b:51:f8:0d:35:23:73:
19:e3:d9:8e:b9:cb:3c:2f:21:78:25:e4:23:2f:fa:
ea:c6:35:a6:0a:9c:32:15:1d:82:63:42:31:32:da:
f3:c9:17:48:88:b1:1d:fc:64:fd:ad:10:17:77:52:
8e:7a:d4:4d:cb:63:6f:16:03:dd:0c:b3:5b:df:51:
85:cc:78:be:87:3e:57:4d:d5:be:8a:eb:3b:b4:58:
c8:e0:39:b8:07:48:6d:d0:a5:a0:06:9c:ab:0d:0e:
38:ae:01:33:c8:73:92:99:00:4c:4e:af:30:c1:4f:
60:f2:88:bf:1c:67:77:15:b7:5b:3e:a1:b5:48:64:
ab:fc:e5:0c:24:92:f3:33:03:33:77:f1:76:bc:35:
b5:05:78:6e:6f:bc:26:5a:35:4d:b6:22:e6:ff:8f:
85:ec:65:6a:08:2c:81:d7:cc:ba:d2:a7:18:1b:eb:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:32:E7:2E:61:E0:88:15:C0:CD:5B:DF:67:98:FF:73:7F:A4:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db5de5bf-c386-47fc-819b-84f11b94fb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:e080::/48
Signature Algorithm: sha256WithRSAEncryption
94:f2:19:24:6e:3f:83:e7:38:5e:1c:23:99:91:17:57:84:86:
d1:e0:75:7d:65:65:5a:cd:b7:d5:20:f8:42:ed:b6:c8:cc:ad:
5a:a0:9e:3d:2a:48:06:6f:e5:a4:e3:eb:11:91:c9:bb:f0:63:
25:f8:79:b9:d9:47:ea:72:6e:b5:d6:ca:fb:92:a8:03:90:13:
12:0c:66:43:82:76:fd:31:be:15:11:3f:9b:ed:39:b5:ed:2e:
6a:fd:c1:1b:01:85:a1:49:c4:38:1e:d6:4e:2f:26:4f:7e:f6:
30:c4:21:e5:97:16:2c:3e:e8:c0:7c:04:b3:05:0e:56:37:d0:
84:4a:00:fb:aa:85:24:e6:7c:1c:47:fc:a1:5f:76:32:21:c8:
be:4f:6a:e6:c8:64:42:50:92:fc:6b:c1:e4:01:fa:2f:c7:0a:
73:61:14:19:93:38:7a:cc:a1:72:06:a6:1c:5a:30:24:b3:ea:
dc:69:07:94:c5:ef:52:1e:05:83:15:48:44:48:51:d1:1c:53:
01:2f:30:92:11:5b:a0:5d:df:63:d5:67:f4:cc:cc:85:b0:2f:
a0:31:44:72:51:2d:78:a0:88:fc:24:79:35:e0:11:29:a2:ae:
ff:72:7b:46:aa:29:4a:fa:46:f0:44:2b:f2:77:77:7f:65:68:
78:99:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:05 2026 by rpki-client